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1. (original) In a signaling network in which signaling messages are communicated 
between signaling points of the signaling network, an impravemcnt of apparatus for selectaWy 
encoding at least portions of a signaling message communicated by way of a first selected signal 
point to at least a second selected signal point, said apparatus comprising: 

an encryption selector operable responsive to delivery of the si^aling message at 
the first selected signal point, said encryption selector for selecting which, if any, portion of the 
signaling message to encrypt; and 

an encryptor adapted to receive indications of the signaling message and to 
receive indications of selection made by said encryption selector, said encryptor selectably for 
encrypting the portion of the signaling message selected by said encryption selector to be 
encrypted, the signaling message thereafter to be forwarded on to the second selected signaling 
point 



2. (original) TTie apparatus of claim 1 wherein the signaling network comprises an SS7 
signaling network, wherein the first selected signal point comprises a first signaling ttansfer 
point and wherein said encryption selector and said encryptor are embodied at the first signaling 
transfer point 



3. (original) The apparatus of claim 1 further comprising an encryption selection 
database accessible by said encryption selector, said encryption selection database maintaining 
an index of which portion, if any, of the signaling message is to be encrypted, and wherein said 
encryption selector accesses the index maintained at said encryption selection database pursuant 
to the selection of which, if any, portion of the signaling message to encrypt 

4. (original) The apparatus of claim 3 wherein the signaling message is originated by 
an originating node and wherein the index maintained by said encryption selection database 
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comprises indicia a^ociated with the originating node indexed together with value, 

representative of which, if any. portion of the signaling message is to be encrypted. 

5. (original) TTie apparatus of claim 3 wherein the second selected signal point to 
which the signaling message is to be forwarded is identified by an identifier and wherein the 
index maintained by said encryption selection database comprises indicia associated with the 
identifier indexed together with values representative of which, if any, portion of the signaling 
message are to be encrypted. 

6. (original) The apparatus of claim 1 wherein the signaling message comprises a 
header pan and a payload part and wherein the portion, if any, of the signaling message selected 
by said encryption selector to be encrypted comprises a selected portion of the payload part. 

7. (original) The apparatus of claim 6 wherein the signaling network comprises an SS7 
signaling network, wherein the signaling message comprises a message signaling unit, and the 
payload part of the signaling message comprises a portion of die message signaling unit. 

8. (original) The apparatus of claim 7 wherein the payload pait of the message 
signaling unit forming the signaling message that said encryptor selectably encrypts comprises at 
least a selected one of an MTP3 part and an AP part, and wherein said encryption selector 
selects, if any, at least one of the MTP3 part and the AP part of the message signaling unit. 

9. (original) The apparatus of claim 1 wherem said encryptor encrypts the portion of 
the signaling message pursuant to a public-key encryption scheme. 

10. (currently amended) The apparatus of claim 9 wherein die second selected 
$ippal point owitoh node to which the signaling message is to be forwarded is identified by an 
identifier and wherein the public-key encryption scheme used by said encryptor encrypts the 
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portion, if «ny. of the signaling message using a public encryption key associated widt the 

identifier that idenUfics the second selected signaJ point. 

11. (original) The apparatus ofclaim 10 whcreiu said apparatus further comprises an 
encrypUon key database accessible by said encryptor.said encryption key database m^^^ 

an mdex that indexes together the public encryption key ^d the identifier associated therewith. 

12. (original) The apparatus of claim 11 wherein said encryptor accesses said encryption 
key database pursuant to encryption of the portion of the signaling message selected by said 
encryption selector to access the encryption key associated with the second selected signal point. 

IS.Coriginal) tothesignalingnetworkofclaimlfurlherincludingapparatusfor 
sclectably decoding the signaling message, said apparatus comprising: 

a detector adapted to receive indications of the signaling message, said detector 
for detecting which, if any, part of the signaling message is encrypted; and 

a d^encryptor adapted to receive indications of detections made by said detector 
and to receive indications of the signaling message sent to the second selected signal point, said 
de-encryptor selcctably for de^crypting the enci>pted portion, if any. of the signaling mwsage. 

14. (original) The apparatus of claim 13 wherein the signaling message is delivered to 
said detector and to said de-encryptor by way of an unttusted communication path. 

1 5. (original) The apparatus of claim 13 whereto de-encryption performed by said de- 
encryptor utilizes an encryption key to de-encrypt the encrypted portion, if any. of the signaling 
message. 
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16. (original) In a method of communicating in a signaling network in which signaling 
messages are communicated between signaling point, of the signal network, an improvement of 
a meOiod for selectably encoding at least portions of a signaling message communicated by way 
of a first selected signal point to at least a second selected signal point, said method for 
selectably encoding comprising: 

selecting, responsive to delivery of the signaling message at the first selected 
Signal point, which portion, if any. of the signaling message to encrypt; and 

selectably encrypting, responsive to selection made during said operation of 
selecting, the portion, if any, of the signaling message; and thereafter 

forwarding on the signaling message to die second signal point. 

17. (original) Tlie method of claim 16 wherein the signaling network comprises an SS7 
signaling network, wherein the first selected signal point comprises a first signaling transfer 
point, and wherein said operations of selecting and selectably encrypting are perfotmed at die 
first signal transfer point. 

1 8. (original) The meUiod of claim 16 further comprising the operations of delivering 
the signaling message to the second signal point, determinmg whedier any portion of the 
signaling message is encrypted, and decrypting the portion of the signaling message that is 
detennined during said operation of determining to be encrypted. 

19. (original) The method of claim 18 wherein said operation of forwarding is 
performed by way of a communication path of an untrusted level of security. 

20. (original) The method of claim 18 wherein said operations of encryptmg and 
decrypting are performed pursuant to a public-private key encryption and decryption scheme. 
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